$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qfkwsgb2k4m1Eq-Vve8xnZh4k0Y.roa File: qfkwsgb2k4m1Eq-Vve8xnZh4k0Y.roa (raw, json) Hash identifier: nsnqRtvCRtcUJpvPfdpkTmEqfEME68dMCEcgAeowDRI= Subject key identifier: A9:F9:30:B2:06:F6:93:89:B5:12:AF:95:BD:EF:31:9D:98:78:93:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3154 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qfkwsgb2k4m1Eq-Vve8xnZh4k0Y.roa Signing time: Mon 26 Aug 2024 05:30:21 +0000 ROA not before: Mon 26 Aug 2024 05:30:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12628 (0x3154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A9F930B206F69389B512AF95BDEF319D98789346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:b4:c1:6d:80:35:03:ee:5c:23:c0:15:56: a7:a0:a4:3d:4d:7d:37:6b:cd:19:c2:e4:73:93:57: 48:c6:d3:5d:df:86:76:28:59:1a:34:82:2e:0f:db: 37:9e:c9:41:c3:68:24:89:1e:4a:e7:3c:a5:e6:c4: be:f2:c3:56:e9:55:3e:dc:d6:54:f3:0b:cb:86:0d: 2f:b9:0c:b0:c2:55:79:41:2f:f8:b1:2f:9a:fc:89: 68:c6:9d:23:55:d1:9a:ca:01:ed:1b:8e:d4:88:74: 68:ee:ec:8e:07:f7:c8:0b:29:14:68:80:db:90:f5: 7f:67:86:c6:de:40:8d:4c:00:18:ec:b7:a9:8b:e7: b0:22:c3:18:8a:d0:c6:c9:de:f0:56:29:60:66:bb: d4:fc:18:0f:2f:e3:22:c8:db:1a:b8:ed:4c:43:7d: 5b:5a:51:a8:75:a0:c8:5c:67:84:7c:25:67:b3:03: a7:8b:b5:64:d9:b9:75:a4:c4:8f:d5:db:14:66:cb: d8:bb:02:99:68:67:40:23:3e:67:9b:b2:a4:84:62: 70:cf:5a:a1:29:00:56:a1:fb:d2:33:15:e2:c1:88: e3:ed:b5:66:87:af:e5:d3:f9:59:af:bb:54:00:48: 3d:00:83:b3:10:b7:cb:42:d4:df:3a:76:f0:55:42: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:30:B2:06:F6:93:89:B5:12:AF:95:BD:EF:31:9D:98:78:93:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qfkwsgb2k4m1Eq-Vve8xnZh4k0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.16.0/21 Signature Algorithm: sha256WithRSAEncryption 09:59:fb:5e:9a:8c:98:50:31:de:46:e4:c6:49:88:9a:10:44: df:76:90:c4:d6:a9:84:03:3b:b0:14:81:e7:0e:ae:34:d5:99: 48:28:91:6e:a6:3b:f6:bf:6b:da:8d:a2:fa:81:59:03:99:71: 40:c4:1b:38:19:5b:e2:6c:42:0e:fd:56:f7:b7:18:1b:eb:a8: f0:87:36:70:f1:3f:e1:8c:0f:46:56:81:3e:2b:ea:c6:13:da: 2c:d2:9a:77:22:a1:63:af:61:4d:7f:50:2d:01:7d:6e:85:ad: 80:82:c0:70:4a:c1:9e:54:64:37:86:8b:d0:4f:c9:8c:5c:4a: 7c:b4:16:cb:85:bf:89:b3:98:c0:1b:8e:f9:14:d9:a0:61:7d: 0e:34:76:b2:6d:94:3a:a2:61:5a:bb:60:e7:f5:b6:e4:72:86: 3d:d2:78:dc:6c:cf:5b:af:26:2a:be:a0:65:20:54:df:3b:cd: 50:5c:45:3a:55:ae:a5:b4:32:85:07:df:74:58:57:6e:ee:ee: 61:ae:69:76:c5:f7:06:7b:6e:02:50:50:45:4e:c3:a3:8e:dc: 6a:e4:28:14:f7:2f:bf:5a:ba:c4:cd:c7:ef:af:b6:4c:56:98: f8:6d:61:f4:25:9b:4a:cc:1d:02:3b:d1:b1:1a:84:84:72:e2: a3:2b:93:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5RjkzMEIyMDZGNjkz ODlCNTEyQUY5NUJERUYzMTlEOTg3ODkzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrXbTBbYA1A+5cI8AVVqegpD1NfTdrzRnC5HOTV0jG013fhnYo WRo0gi4P2zeeyUHDaCSJHkrnPKXmxL7yw1bpVT7c1lTzC8uGDS+5DLDCVXlBL/ix L5r8iWjGnSNV0ZrKAe0bjtSIdGju7I4H98gLKRRogNuQ9X9nhsbeQI1MABjst6mL 57AiwxiK0MbJ3vBWKWBmu9T8GA8v4yLI2xq47UxDfVtaUah1oMhcZ4R8JWezA6eL tWTZuXWkxI/V2xRmy9i7AploZ0AjPmebsqSEYnDPWqEpAFah+9IzFeLBiOPttWaH r+XT+Vmvu1QASD0Ag7MQt8tC1N86dvBVQu4zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqfkwsgb2k4m1Eq+Vve8xnZh4k0YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Fma3dzZ2IyazRtMUVxLVZ2 ZTh4blpoNGswWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wRAwDQYJKoZIhvcNAQELBQADggEBAAlZ+16ajJhQMd5G5MZJiJoQRN92kMTWqYQD O7AUgecOrjTVmUgokW6mO/a/a9qNovqBWQOZcUDEGzgZW+JsQg79Vve3GBvrqPCH NnDxP+GMD0ZWgT4r6sYT2izSmncioWOvYU1/UC0BfW6FrYCCwHBKwZ5UZDeGi9BP yYxcSny0FsuFv4mzmMAbjvkU2aBhfQ40drJtlDqiYVq7YOf1tuRyhj3SeNxsz1uv Jiq+oGUgVN87zVBcRTpVrqW0MoUH33RYV27u7mGuaXbF9wZ7bgJQUEVOw6OO3Grk KBT3L79ausTNx++vtkxWmPhtYfQlm0rMHQI70bEahIRy4qMrk1o= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org